Fake OpenAI Codex download tricks macOS users into installing malware

Cato Networks uncovered a malware campaign that uses a sponsored search ad and a fake OpenAI Codex download page to trick macOS users into pasting a malicious command into Terminal, a variation of the ClickFix social engineering technique. The attack begins with a sponsored search result for queries like 'codex macos download' and persuades victims to execute the infection step themselves.

A malware campaign using a sponsored search ad and a fake OpenAI Codex download page to trick macOS users into pasting a malicious command into Terminal has been uncovered by Cato Networks. It’s a variation of ClickFix, a popular social engineering technique that persuades victims to execute the infection step themselves rather than opening a malicious file. The attack starts with a sponsored search result for queries such as “codex macos download.” The ad appears … More https://www.helpnetsecurity.com/2026/08/25/fake-openai-codex-download-macos-users/ The post Fake OpenAI Codex download tricks macOS users into installing malware https://www.helpnetsecurity.com/2026/08/25/fake-openai-codex-download-macos-users/ appeared first on Help Net Security https://www.helpnetsecurity.com .